7.5

CVE-2023-40703: mattermost Uncontrolled Resource Consumption

CVSS: 7.5v3.1HighModified
AliasesGHSA-c37r-v8jx-7cv2CGA-c2p2-xx2x-vrffCGA-r5xj-xq2p-gmwf
Published 27-11-2023Last modified 03-06-2025
Open JSON

Vulnerability summary

CVE-2023-40703 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in mattermost. EPSS estimates a 0.72% chance of exploitation in the next 30 days, higher than 53.2% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (NVD)
EPSS score
0.72%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 7
CGA-34MP-WG56-2PH9CGA-3FRM-J39H-86CXCGA-3RF7-GWGC-9PHRCGA-8P9X-9G6F-P73WCGA-P9FC-592H-MVFMCGA-RF23-3R6F-FWWW

Timeline

  1. 27-11-2023
    PublishedVulnerability first disclosed.
  2. 03-06-2025
    Last modifiedVulnerability information updated.

Description

Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a attacker to consume excessive resources, possibly leading to Denial of Service, by patching the field of a block using a specially crafted string.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.72%

Chance of exploitation in the next 30 days

Percentile

53%

Versus all other CVEs

30-day change

0.00 pp

From 0.72% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.72%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard2 products
  • mattermost-fips-10.5All versions (No fix recorded)
  • mattermost-fips-10.5-compatAll versions (No fix recorded)
Github.com/mattermost/mattermost-server1 product
  • v6< 7.8.13
Github.com/mattermost/mattermost/server1 product
  • v8≥ 9.1.0, < 9.1.1 | ≥ 9.0.0, < 9.0.2 | < 8.1.4
Mattermost1 product
  • mattermost≤ 8.1.3 | ≤ 9.0.1 | ≤ 9.1.0 | ≤ 7.8.12 | ≥ 8.0.0, ≤ 8.1.3 | ≥ 9.0.0, ≤ 9.0.1 | 9.1.0

4 vendors · 5 products

References

4 links